Bookmark this page

Summary

In this chapter, you learned:

  • Red Hat Satellite 6 compliance policies can be used to centrally manage and review the results of OpenSCAP scans on its registered clients.

  • A Red Hat Satellite 6 compliance policy is a named, scheduled task that scans specific hosts for compliance with an OpenSCAP XCCDF profile.

  • OpenSCAP content must be uploaded to the Red Hat Satellite Server before it can be used in a compliance policy.

  • Clients update their compliance policy configuration using Puppet, run OpenSCAP scans locally, and upload the results to Red Hat Satellite.

  • The compliance policy dashboard in the Satellite Server's web UI provides an overview of compliant and noncompliant hosts, and links to detailed OpenSCAP compliance reports for each host.

  • A compliance policy can be customized with an OpenSCAP tailoring file, which may be created in SCAP Workbench.

Revision: rh415-7.5-813735c